Secure Electronic Registration and Voting Experiment

Secure Electronic Registration and Voting Experiment (SERVE) was an experiment by the Federal Voting Assistance Program (FVAP) to allow military personnel and overseas citizens covered by the Uniformed and Overseas Citizens Absentee Voting Act (UOCAVA) to vote in elections in the United States via the Internet.[1][2] While called an experiment, SERVE included participation from 51 counties including up to 100,000 voters and ballots cast would have been counted toward actual election results.[3][4] According to the SERVE security report, there were "two groups of eligible voters: (1) American citizens living outside the U.S., and (2) military personnel and their dependents, regardless of whether they reside in the U.S. or overseas."[5]

Election technology
Terminology
Testing
Technology
Manufacturers

The project was contracted by FVAP to Accenture, who in turn subcontracted Avenade, Hart InterCivic, Hewlett-Packard, VeriSign, election.com, and others.[6][7]

The project was cancelled in 2004 after a report critical of the program was published.[4] Accenture, who acquired election.com in 2003,[3] has received criticism for its role in SERVE and other failed and cancelled electronic voting and registration projects.[8]

Background

There are millions of Americans living overseas in at least 100 countries.[9] In the early 2000's, Americans living abroad needed to take several steps to be able to vote in their home districts, often having to correspond via mail numerous times in order to obtain identity information and permission to be able to get a mail-in-ballot. This also presented a problem, because some of the countries that are housing Americans do not have the most reliable mail systems.[5] With legal-binding deadlines to register and cast ballots, this time-consuming process may hinder many individuals from voting. According to the Security Analysis report, the Secure Electronic Registration and Voting Experiment was established to minimize time spent voting by creating an online platform, which would allow Americans overseas greater access to vote. This began as a small project of 84 voters in 2000, but was expected to be implemented in 50 countries with seven corresponding US state elections by 2004. This would have included around 100,000 ballots, in an attempt to one day develop a system with the capacity to include all overseas Americans.[5]

Security report analysis

In order to assess SERVE's security, professionals from various backgrounds conducted an analysis. They analyzed and documented many weaknesses in SERVE. The report first discussed the likelihood that cyber-attacks would succeed against SERVE, as well as to what extent an event such as a hacker breakthrough could compromise an election. The report states that "the software of SERVE is totally closed and proprietary", an inadequate inspection of SERVE before its launch allowed it "to be vulnerable to various forms of programmer attacks". This is critical information in the voting world. According to the report, a potential hack into SERVE "could result in large-scale, selective voter disenfranchisement, and/or privacy violation, and/or vote buying and selling, and/or vote switching even to the extent of reversing the outcome of many elections at once". This means that if SERVE is implemented, elections as important as the Presidential could be completely fraudulent without any trace of a culprit. Finally, it was the critics' place to suggest any potential solutions that could remedy SERVE's vulnerabilities. Their report states, "that the vulnerabilities described cannot be fixed by design changes or bug fixes to SERVE," it explains that, "the vulnerabilities are fundamental in the architecture of the Internet and of the PC hardware and software that is ubiquitous today". It concludes that "there really is no good way to build such a voting system without a radical change in overall architecture of the Internet or some unforeseen security breakthrough".[5]

As discussed by many experts, including a project manager at the Center for Public Integrity and a research fellow at Harvard's Kennedy School of Government, security was the largest threat to the SERVE program.[10] These security risks were put to the test in 2010 when J. Alex Halderman, a professor of Computer Science at the University of Michigan, took on a challenge issued by the District of Columbia to see if Halderman's students could hack their new Internet Voting system.[11] Halderman's Computer Science students were quickly successful. The students not only managed to disable the system but also were able to add votes, change votes, and manipulate the program so that once voters cast their ballots, the University of Michigan fight song would play. These hacking results were immediately turned over to the DC system team in order to strengthen the security wall of the program. Within days, the DC experiment was terminated as the security risks were deemed too high and the threats of fraud and corruption were undeniable.

Subsequent studies have reinforced the enormous difficulty of the requirements for secure online voting, and defined the research and development needed in creating end-to-end auditable voting systems.[12]

MOVE Act

In order to give overseas voters more time and make it easier for them to vote, in 2009 the Military and Overseas Voter Empowerment Act (MOVE Act) was enacted.

gollark: Still a language.
gollark: Check out my clear and helpful comments, descriptive identifiers and elegant algorithm.
gollark: This part of the program is particularly great.
gollark: Well, my code is generally kind of unpleasant, but this particular bit is fine.
gollark: This is "Rust" "code". It has a perfectly reasonable amount of symbols.

References
  1. Boyle, Alan (2003-06-03). "Pentagon launches Internet voting effort for overseas Americans". NBC News. Retrieved 2009-06-25.
  2. "Archived copy" (PDF). Archived from the original (PDF) on 2013-02-17. Retrieved 2013-10-12.CS1 maint: archived copy as title (link)
  3. "Archived copy". Archived from the original on 2013-10-15. Retrieved 2013-10-12.CS1 maint: archived copy as title (link)
  4. https://www.nytimes.com/2004/01/21/technology/23CND-INTE.html
  5. Jefferson, David; et al. (January 21, 2004). "A Security Analysis of the Secure Electronic Registration and Voting Experiment (SERVE)" (PDF). servesecurityreport.org. Retrieved February 16, 2016.
  6. "Archived copy". Archived from the original on 2013-10-15. Retrieved 2013-10-12.CS1 maint: archived copy as title (link)
  7. "Accenture Helps Department of Defense Develop Secure Internet Registration and Voting Demonstration for 2004 Election". Retrieved March 16, 2016.
  8. "Accenture Epitome Of Incompetence". Retrieved March 16, 2016.
  9. Costanzo, Joe; et al. (May 17, 2013). "Counting the Uncountable: Overseas Americans". The Migration Policy Institute. Migration Policy Institute. Retrieved February 16, 2016.
  10. Arak, Joel (July 12, 2003). "Americans Abroad To Vote Online". CBS News. Associated Press. Retrieved February 16, 2016.
  11. Weise, Elizabeth (January 28, 2016). "Internet voting is just too hackable, say security experts". USA Today. USA Today. Retrieved February 16, 2016.
  12. "The Future of Voting: End-to-End Verifiable Internet Voting - Specification and Feasibility Study - E2E-VIV Project". U.S. Vote Foundation. 2015. Retrieved 2016-09-01.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.